Win IT Exam with Last Dumps 2025


Microsoft AZ-500 Exam

Page 42/45
Viewing Questions 411 420 out of 443 Questions
93.33%

Question 411
You need to recommend which virtual machines to use to host App1. The solution must meet the technical requirements for KeyVault1.
Which virtual machines should you use?
A. VM1 only
B. VM1, VM2, VM3, and VM4
C. VM1 and VM2 only
D. VM1, VM2, and VM4 only

Question 412
HOTSPOT
-
You have an Azure subscription that contains the resources shown in the following table.
AZ-500_412Q_1.png related to the Microsoft AZ-500 Exam
You create a shared access token as shown in the following exhibit.
AZ-500_412Q_2.png related to the Microsoft AZ-500 Exam
Which resources can you access by using the shared access token and Key1? To answer, select the appropriate options in the answer area.
NOTE: Each correct answer is worth one point.
AZ-500_412Q_3.png related to the Microsoft AZ-500 Exam
Image AZ-500_412R.png related to the Microsoft AZ-500 Exam

Question 413
You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains an Azure SQL database named DB1.
You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1.
What should you do first?
A. From Advanced Threat Protection types, select SQL injection vulnerability.
B. Configure the Send scan report to setting.
C. Set Periodic recurring scans to ON.
D. Enable the Microsoft Defender for SQL plan.

Question 414
HOTSPOT
-
You have an Azure subscription that contains the resources shown in the following table.
AZ-500_414Q_1.png related to the Microsoft AZ-500 Exam
SQL1 has the following configurations:
• Auditing: Enabled
• Audit log destination: storage1, Workspace1
DB1 has the following configurations:
• Auditing: Enabled
• Audit log destination: storage2
DB2 has auditing disabled.
Where are the audit logs for DB1 and DB2 stored? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
AZ-500_414Q_2.png related to the Microsoft AZ-500 Exam
Image AZ-500_414R.png related to the Microsoft AZ-500 Exam

Question 415
SIMULATION
-
You need to prevent HTTP connections to the rg1lod28681041n1 Azure Storage account.
To complete this task, sign in to the Azure portal.

AZ-500_415E.png related to the Microsoft AZ-500 Exam


Question 416
HOTSPOT
-
You have an Azure subscription that contains the virtual machines shown in the following table.
AZ-500_416Q_1.png related to the Microsoft AZ-500 Exam
You have an Azure Cosmos DB account named cosmos1 configured as shown in the following exhibit.
AZ-500_416Q_2.png related to the Microsoft AZ-500 Exam
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
AZ-500_416Q_3.png related to the Microsoft AZ-500 Exam
Image AZ-500_416R.png related to the Microsoft AZ-500 Exam

Question 417
You are troubleshooting a security issue for an Azure Storage account.
You enable Azure Storage Analytics logs and archive it to a storage account.
What should you use to retrieve the diagnostics logs?
A. Azure Cosmos DB explorer
B. Azure Monitor
C. AzCopy
D. Microsoft Defender for Cloud

Question 418
You have an Azure subscription that contains an Azure Blob storage account named blob1.
You need to configure attribute-based access control (ABAC) for blob1.
Which attributes can you use in access conditions?
A. blob index tags only
B. blob index tags and container names only
C. file extensions and container names only
D. blob index tags, file extensions, and container names

Question 419
You have an Azure subscription that contains a storage account and an Azure web app named App1.
App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings.
You need to validate the name resolution to Cosmos1.
Which DNS zone should you use?
A. endpoint1.privatelink.documents.azure.com
B. endpoint1.privatelink.blob.core.windows.net
C. endpoint1.privatelink.azurewebsites.net
D. endpoint1.privatelink.database.azure.com

Question 420
You need to configure WebApp1 to meet the data and application requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Upload a public certificate.
B. Turn on the HTTPS Only protocol setting.
C. Set the Minimum TLS Version protocol setting to 1.2.
D. Change the pricing tier of the App Service plan.
E. Turn on the Incoming client certificates protocol setting.
A: To configure Certificates for use in Azure Websites Applications you need to upload a public Certificate.
C: Over time, multiple versions of TLS have been released to mitigate different vulnerabilities. TLS 1.2 is the most current version available for apps running on
Azure App Service.
Incorrect Answers:
B: We need support the http url as well.
Note:
AZ-500_420E.png related to the Microsoft AZ-500 Exam
References:
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth
https://azure.microsoft.com/en-us/updates/app-service-and-functions-hosted-apps-can-now-update-tls-versions/